Malicious Pull Requests target Vizor and Zingo wallets, with six requests not merged

According to The Defiant, malicious code activities targeting the Vizor and Zingo wallets have been disclosed. Attackers attempted to inject credential-stealing code into the relevant code repositories by submitting malicious Pull Requests, involving a total of six requests, all of which were not merged.

The report states that the activity combines the credential-stealing code with specific instructions, directing AI code review tools not to flag these secret upload actions, intending to bypass the automated review process.